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Redundant brake control system for a vehicle 
BACKGROUND AND SUMMARY OF THE INVENTION 

[0001] This application is a National Phase of PCT/EP2Q05/001871, filed 

February 23. 2005, and claims the priority of German patent document 10 2004 
009 469.1, filed February 27, 2004, the disclosure of which is expressly 
incorporated by reference herein. 

[0002] The present invention relates to a brake control system for a 

yehicle, in particular a commercial vehicle, wherein the vehicle comprises at 
least one fi-ont axle with at least one left-hand front wheel and at least one right- 
hand front wheelj. and at least one rear axle with at least one left-hand rear 
wheel and at least one right-hand rear wheel, wherein the brake control system 
comprises a service brake for braking the wheels of the vehicle. 

[0003] DE 100 32 179 Al discloses a vehicle with a control system which 

operates with an electronically actuatable drive train, which comprises at least 
one steering system and one drive unit of the vehicle. The known control system 
has an input level with devices for inputting values continuously preset by a 
driver and converting these preset values into setpoint signals. The control 
system further comprises a coordination level for converting the setpoint signals 
into triggering signals , which that are converted by actuators of the drive train. 
In othor words That is. the control system has a control device which, from a 
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motion vector on the input side, generates on tho output oido control signals on 
the output side for actuating the drive train and which is coupled to the drive 
train for transmission of the control signals . The , oaid drive train then 
oxocuting executes the control signals in order to implement the driver's wishes, 
i.e.^ it is a so-called "drive-by-wire system" or "X-by-wire system". 

[0004] DE 100 46 832 Al discloses another control system which is suitable 

for controlling a vehicle equipped with an electronically actuatable drive train. A 
memory device stores vehicle data relevant to vehicle movement dynamics, time 
data, position data, actuation signals from the driver and triggering signals for 
the drive train generated by a control device. Such a control system allows 
improved accident analysis. 

[0005] In today's vehicles, the service brake comprises hydraulic brake 

actuators, which are associated with the individual vehicle wheels. To increase 
vehicle safety, a two-circuit system is generally provided , in which and has two 
independent hydraulic circuits arc provided, one of which the circuits serves to 
actuate the brake actuators associated with the rear axle while the other servos 
to actuate actuates the brake actuators associated with the front axle. With this 
construction, the brake actuators associated with the same axle are coupled 
together via the common hydraulic circuit. This coupling means that, if one of 
the hydraulic circuits fails, all the brake actuators linked into this hydraulic 
circuit always fail. 
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[0006] EP 0 832 800 A2 discloses an electronic braking system with 

various hierarchical levels for the architecture of the brake control system. In 
addition to vehicle modules, wheel modules are provided which exchange 
messages with a central module within one hierarchical level via a data bus. EP 
1 231 121 A2 also describes the structural configuration of a data bus system for 
brake actuation. 

[0007] Thio io whoro the prooont invention comoo in. Tho An object of the 

present invention doals with is to solve the problem of providing an improved 
embodiment for a vehicle of the abovementioned type, which ombodimont offers 
in particular increased safety. 

This problem is solved according to tho invention by tho subjoct matter of tho 
indopcndont claim. Advantagoous ombodimonts Gonotituto the subject mattor of 
tho dependent claims. 

[0008] The invention is based on the general concept of providing the 

service brake with electronically actuatable brake units associated with the 
individual wheels . The , which brake units may be actuated independently of 
one another by two central, redundantly connected service brake control devices. 
In this way, a four-circuit system may be produced, for example, without a 
particularly high degree of complexity being required therefor . In particular, no 
hydraulic lines have to be installed, since the control lines used to actuate the 
brake units merely have to be suitable for transmitting electrical control signals 
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and thus are considerably cheaper than hydraulic lines. The electrical control 
lines are not only cheaper to purchase than hydraulic lines but also require less 
effort to install. 

[0009] The second central control device is uood to provide provides a 

redundant brake control system , by moans of which it is poGoiblo to improve 
conoidcrably so that the fail safety of the brake system is considerably improved . 
The two control devices are connected to the individual brake units [[in]] such [[a 
way]] that both control devices operate permanently in parallel and may replace 
one another immediately and completely in the event of failure. At the same 
time, the line arrangement according to the invention reduces the amount of line 
material used and the labor required for installation. 

Further important foaturoo and advantages of the invention arc rovoalcd by the 
subordinate claims, tho drawings and the aooociatod description of the figures 
made with roforoncc to tho drawings. 

It goes without saying that tho abovcmcntioncd features and those still to bo 
explained below may bo uood not only in tho reGpoctivcly stated combination but 
also in other combinations or alone, without going beyond the scope of tho 
present invention. 

Preferred exemplary embodiments of the invention arc illustrated in tho 
drawings and are explained in more detail in tho following deooription, wherein 
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tho oamo roforonco numoralo rofor to idontical or functionally idontioal or oimilar 
componontG. 

In tho, in each caso GchomatiG, drawingo, 

[0010] Other objects, advantages and novel features of the present invention 
will become apparent from the following detailed description of the invention 
when considered in conjunction with the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0010] Figs 1 to 7 ohow groatly oimphfiod diagramo are schematic views of 

seven embodiments of a vehicle with a brake control system according to the 
present invention , in variouo ombodimonts . 

DETAILED DESCRIPTION OF THE DRAWINGS 

[0011] According to Fig. 1, a vehicle 1 illustrated only in part comprises at 

least one front axle 2 and at least one rear axle 3. With regard to the direction of 
travel, the front axle 2 has at least one left-hand front wheel 4 and at least one 
right-hand front wheel 5. Liltewise, with regard to the direction of travel, the 
rear axle 3 also has at least one left-hand rear wheel 6 and at least one right- 
hand rear wheel 7. It is clear that, in another embodiment, the vehicle 1 may 
also comprise a plurality of rear axles 3 and in particular also a plurality of front 
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axles 2. Moreover, in the case of a rear axle 3, the individual rear wheels 6, 7 
may for example take the form of dual wheels or twin wheels. 

[0012] Furthermore, the vehicle 1 is provided with a service brake 8, by 

[[means]] way of which the vehicle 1 may be braked, wherein i.e.. the service 
brake 8 serves to brake the individual wheels 4 to 7 of the vehicle 1. For each 
brakable wheel 4 to 7, the service brake 8 comprises a separate brake unit, 
namely a front left-hand brake unit 9, a front right-hand brake unit 10, a rear 
left-hand brake unit 11 and a rear right-hand brake unit 12. The brake units 9 to 
12 are in each case do signed configured to be electronically actuatable. For 
example, the brake units 9 to 12 are electromechanical brake units, which 
convert electrical energy into mechanical braking work. [[For]] Again for 
example, such an electromechanical brake has an electric motor as an actuatorj 
said motor that, when actuated, proooing presses conventional brake shoes 
against a conventional brake disc. 

[0013] The service brake 8 forms an essential component of a brake control 

system 45, which is additionally equipped with a first central control device 13, 
which is connected to the brake units 9 to 12 via at least one control line. 
Linkage or coupling to the brake units 9 to 12 is effected in such a way so that 
the first central control device 13 may actuate the individual brake units 9 to 12 
independently of one another. In the embodiment according to Fig. 1, four such 
control lines 14, 15, 16, 17 are provided. 
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[0014] Moreover, the brake control system 45 comprises a second central 
control device 18 , which that is connected redundantly to the first central control 
device 13. In this way, the operating and functional safety of the service brake 8 
or of the brake control system 45 may be improved, [[since,]] because, in the 
event of failure of the first central control device 13, the second central control 
device 18 may provide an adequate replacement for the first central control 
device 13. The vehicle 1 is thus provided with a redundant brake control system 
45. 

[0015] In the embodiments illustrated herein, the service brake 8 takes the 

form of a wired system, i.e-^ it has no compulsory mechanical or hydraulic 
coupling between a braking force setpoint generator, such as for example a brake 
pedal, and the individual brake units 9 to 12. Preferably, the system is here 
accordingly what is termed a "brake-by- wire system", in which a braking 
command is forwarded electrically to the individual brake units 9 to 12 and 
implemented there. Accordingly, the control lines 14 to 17 comprise electrical 
leads for transmitting electrical signals , which that serve to actuate the 
individual brake units 9 to 12. 

[0016] The electronic coupling between an input level of the brake control 

system 45, which takoo in the form of a braking force setpoint generator such as, 
for example a brake pedal, and an output level of the brake control system 45, 
which takes in the form of brake units 9 to 12 cooperating with the wheels 4 to 7, 
is preferably hierarchically structured in the case of the present invention. To 
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this end, firot of all a brake modulator 20 is provided , which dotorminoo to 
determine an axle brake command for each axle 2, 3 as a function of preset 
values relating to vehicle movement dynamics. 

[0017] The preset values for vehicle movement dynamics taken into 

account here may consist not only of a setpoint for vehicle deceleration desired by 
the vehicle driver but also of current state variables of a stabilization system, 
such as for example steering angle and/or transverse acceleration , which that 
may have an effect on the respective braking operation. 

[0018] An axle modulator 21 or 22 respectively for each axle 2, 3 is then 

connected downstream of the brake modulator 20. Each axle modulator 21, 22 
determines a wheel braking command for each assigned wheel 4 to 7 from the 
associated axle braking command. While the axle braking commands may differ 
from one another in that the brake modulator 20 assigns different braking 
moments to the individual axles 2, 3, the wheel braking commands may differ 
from one another within the respective axle 2, 3 through a different left-right 
distribution of the desired braking forces. 

[0019] A separate wheel modulator 23 to 26 for each wheel 4 to 7 is then 

arranged downstream of the individual axle modulators 21, 22. The wheel 
modulators 23 to 26 determine^ as a function of the associated wheel braking 
commands^ actuating signals for actuating brake actuators 27 to 30 , which that 
are associated with the respective brake unit 9 to 12. The brake actuators 27 to 
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30 then individually execute the respective wheel braking command. The 
structure uood makeo it poooiblc allows , inter alia, to arrange the individual 
required wheel modulators 20 to 26 to be arranged non-centrally. In the 
embodiments of Figs 1, 2, 6 and 7, the wheel modulators 23 to 26 are arranged^ 
for example^ on the individual brake units 9 to 12 or integrated therein. In 
contrast thereto, in the embodiments of Figs 1 and 2, the axle modulators 21, 22 
are integrated into the first control device 13 or into the brake modulator 20. 
Likewise, the brake modulator 20 is integrated into the first control device 13 in 
all variants embodiments . 

[0020] The brake control system 45 is conveniently equipped with a 

dynamic system for vehicle stabilization. Such a stabilization system is^ for 
example^, an anti-lock braking system (ABS), anti-slip regulation (ASR) or a so- 
called ESP system. Likewise, an electronic all-wheel system may contribute to 
vehicle stabilization. 

[0021] The hierarchical structure of the brake control system 45 makoo it 

poooiblc to arrange or provide allows wheel-specific components of such a 
stabilization system to be arranged or provided in the axle modulators 21, 22. 
Likewise, axle-specific and/or vehicle-specific components of these stabiUzation 
systems may then be arranged or provided in the brake modulator 20. Moreover, 
the wheel modulators 23 to 26 may comprise local control loops , which that act in 
the plane of the respective wheel 4 to 7. 
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[0022] In principle, the second control device 18 may be identical in 

structure to the first control device 13, so as to be able to replace the latter 
completely in an emergency. Operation of the vehicle 1 is then not restricted in 
any way in the event of failure of the first control device 13. Accordingly, the 
second control device 18 also comprises a brake modulator 20* and two axle 
modulators 21' and 22' respectively. In contrast thereto, it is aloo poooiblo to 
QGQign reduced functionality to the second control device 18 can be assigned 
compared to the first control device 13, whereby the second control device 18, 
which is not needed as a rule, may be produced more cheaply. 

[0023] In the embodiments of Figs 1 to 7, the operating safety of the 

redundant brake control system 45 is increased according to the present 
invention in that, of the two front control lines 14, 15 provided for actuation of 
those brake units 9, 10 which that are associated with the front axle 2, at least 
one or the first, here the left-hand control line 14, is connected to the first central 
control device 13. In contrast thereto, of the two rear control lines 16, 17 which 
serve to actuate those brake units 11, 12 which are associated with the rear axle 
3, at least one or the first, here the right-hand control line 17, is connected to the 
second central control device 18. 

[0024] Furthermore, in the embodiments of Figs 1 to 3, the other one or 

second of the front control lines 14, 15, i.e. here the right-hand control line 15, is 
connected to the second control device 18, while the other one or second of the 
two rear control hnes 16, 17, i.e. here the left-hand control line 16, is connected 
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to the first control device 13. In this way, the brake units 9, 10 of the firont axle 2 
and the brake units 11, 12 of the rear axle 3 are automatically connected to both 
control devices 13, 18 via separate control lines 14 to 17. 

[0025] A redundant connection is then provided in the area of the 

individual axles 2, 3. To this end, in the embodiment according to Fig. 3 the two 
front control lines 14, 15 are each connected to both wheel modulators 23, 24, for 
which purpose a corresponding auxiliary line 14' or 15' respectively branches off 
from the respective control line 14, 15. The same takes place with regard to the 
rear axle 3, such that the left-hand rear control line 16 is connected to the rear 
left-hand wheel modulator 25 and via an auxiliary control line 16' to the rear 
right-hand wheel modulator 26. Likewise, the rear right-hand control line 17 is 
connected directly to the rear right-hand wheel modulator 26 and indirectly via 
an auxiliary control line 17' to the rear left-hand wheel modulator 25. It io clear 
in this regard that the The respective control device 13, 18 ultimately emits 
coded wheel braking commands for all the vehicle wheels 4 to 7, such that, in the 
event of failure of one of the control devices 13, 18, the wheel braking commands 
produced by the remaining control device 13 or 18 respectively always reach the 
respective wheel modulator 23 to 26 as a result of the networking provided. 

[0026] In the embodiment according to Fig. 2, the redundant connection in 

the area of the axles 2, 3 is achieved in that, on [[the]] one hand, at each axle 2, 3 
the two control lines 14, 15 or 16, 17 respectively connect the one wheel 
modulator 23 or 25 to the first control device 13 and the other wheel modulator 
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24 or 26 to the second control device 18. On the other hand, a coupling line 35 or 
36 is provided at each axle 2, 3, which line connects together the two wheel 
modulators 23 and 24 or respectively 25 and 26 of the respective axle 2, 3. These 
coupling lines 35, 36 are dcoignod configured or connected such that they 
transmit the signals, supplied via the one control line 14 or 15 or respectively 16 
or 17 to the one wheel modulator 23 or 24 or 25 or 26, respectively, to the 
respective other wheel modulator 24 or 23 or 26 or 25 on the same axle 2, 3. 

[0027] Thus, networking is achieved here too, so making it poooiblo that, in 

the event of failure of one of the control devices 13, 18, to roach the brake units 9 
to 12 can be reached with the remaining control device 13, 18 via the networking 
in the area of the axles 2, 3. By [[means]] wav of such networking in the area of 
the axles 2, 3, it is in principle also possible to connect the first, for example the 
left-hand front control line 14 to the first control device 13 and the first or right- 
hand rear control line 17 to the second control device 18 and moreover to connect 
the second or right-hand front control line 15 to the second or left-hand rear 
control line 16. In this way, networking is also provided here , so that, too, which 
makes it possiblo, in the event of failure of one of the two control devices 13, 18, 
to roach all the wheel modulators 23 to 26 individually can be reached with the 
control commands of the remaining control device 13, 18. 

[0028] In the embodiments of Figs 3 to 7, the axle modulators 21 and 22 
are each arranged on or near to the associated axle 2 or 3^ respectively. In these 
variants embodiments , the axle modulators 21, 22 are thus arranged non- 
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centrally relative to the control devices 13, 18. In this way, a complete 
mechatronic axle module may be produced , which that, for example^, makes 
possible local ABS control of the respective axle 2, 3. 

[0029] In the embodiments of Figs 3 to 5, the wheel modulators 23 to 26 7 

whie h that are associated with the wheels 4 to 7 of the same axle 2 or 3 
respectively, are each integrated into the axle modulator 21 or 22 respectively 
associated with said axle 2, 3. In this way, jointly usable components [[,]] such as^ 
for example^ power supply units, may for oxamplo be used for both wheel 
modulators 23 to 26 on the same axle 2, 3. Integration of the wheel modulators 
23 to 26 into the axle modulators 21, 22 therefore brings about a saving in 
hardware components. 

[0030] In addition to arranging or integrating the wheel modulators 23 to 

26 on or in the brake units 9 to 12 or in the axle modulators 21, 22, it is in 
principle also poGoiblo contemplated to accommodate the wheel modulators 23, 
26 in the respective central control device 13 or 18^ respectively^ or to integrate 
them therein. 

[0031] In the embodiments of Figs 3 to 7, both front control lines 14, 15 are 

connected to the front axle modulator 21 , which that is associated with the front 
axle 2. Likewise, both rear control lines 16, 17 are also connected to the rear axle 
modulator 22 , which that is associated with the rear axle 3. The variants 
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embodiments of Figs 3 to 5 differ through different networking of the axle 
modulators 21, 22 with the two control devices 13, 18. 

[0032] In the embodiment according to Fig. 3, the first or left-hand front 

control line 14 is connected to the first control device 13, while the second or 
right-hand front control line 15 is connected to the second control device 18. 
Likewise, the first or right-hand rear control line 17 is connected to the second 
control device 18, while the second or left-hand rear control line 16 is connected 
to the first control device 13. In other words, both control devices 13, 18 directly 
actuate both axle modulators 21, 22. 

[0033] In the embodiment according to Fig. 4, the first, left-hand front 

control line 14 is again connected to the first control device 13, while the first, 
right-hand rear control line 17 is again connected to the second control device 18. 
In contrast, the second control lines, i.e. the right-hand front control line 15 and 
the left-hand rear control line 16, are connected directly together. The two axle 
modulators 21, 22 are dosignod configured such that they transmit signals, 
supplied by the respective control device 13, 18 via the in each case first control 
Une 14, 17, via the second control lines 15, 16 to the in each case other axle 
modulator 21, 22. In this way networking is Ukewise provided, but with less 
complex wiring, said networking allowing and allows actuation of all the wheel 
modulators 23 to 26 or all the brake units 9 to 12 on failure of one of the two 
control devices 13, 18. 



-14- 



[0034] Fig. 5 shows a further alternative development with regard to 

networking of the axle modulators 21, 22 with the control devices 13, 18. In this 
embodiment, the first or left-hand front control line 14 is connected to the first 
control device 13, while the first or right-hand rear control line 17 is connected to 
the second control device. Furthermore, the first firont control line 14 is 
additionally connected to the second, left-hand rear control line 16. Likewise, the 
first rear control line 17 is connected to the second, right-hand front control hne 
15. Networking is also achieved in this way , oaid networking allowing to allow 
actuation of all the brake units 9 to 12 with the remaining control device 13, 18 
should one of the control devices 13, 18 fail. 

[0035] Figs^ 6 and 7 show examples of additional networking in the area of 

the respective axles 2, 3^ for inGtancoo instance in which the individual wheel 
modulators 23 to 26 are not integrated into the axle modulators 21, 22 but rather 
are arranged on or in the brake units 9 to 12, In these embodiments^ the axle 
modulators 21, 22 are each connected via two axle control lines 37 to 40 to the 
two wheel modulators 23 to 26 of the associated axle 2, 3. In order to provide 
additional networking of the wheel modulators 23 to 26 in the area of the 
respective axle 2, 3, in the embodiment according to Fig. 6 the two axle control 
lines 37, 38 or 39, 40 are respectively connected to the two wheel modulators 23, 
24 or respectively 25, 26 of the associated axle 2, 3, this being achieved via 
corresponding auxiUary or branch lines 37* to 40*. 



-15- 



[0036] Alternatively, networking of the wheel modulators 23 to 26 
corresponding to the embodiment shown in Fig. 7 may also be achieved in that^ 
on [[the]] one hand the axle control lines 37 to 40 of the axle modulators 21, 22 
are each connected to only one of the wheel modulators 23 to 26. In addition, on 
the other hand^ the two wheel modulators 23, 24 or respectively 25, 26 of the 
respective axle 2, 3 are connected together via a coupling line 41 or 42, 
respectively. The individual wheel modulators 23 to 26 are then dcGignod 
configured such that they transmit signals, supplied to them via the associated 
actuating line 37 to 40, via the respective coupling line 41, 42 to the respective 
other wheel modulator 23 to 26 of the same axle 2, 3. 

[0037] In the embodiments of Figs^ 3 to 7, the axle modulators 21, 22 are 

each accommodated in an axle control device 43 or 44, respectively, which is 
arranged in each case on or near to the respective axle 2 or 3, respectively. In the 
embodiments of Figs 3 to 5, the wheel modulators 23 to 26 are integrated into 
the axle control device 43 or 44 assigned to the associated axle 2, 3. 

[0038] In order to be able to bring about implement the networking 

described herein, the individual control lines 14 to 17 or the individual axle 
control lines 37 to 40 or the individual coupling lines 35, 36 or 41, 42 respectively 
preferably each take the form of buses, such that the individual control 
commands may be sent as coded signals over the network produced in this way. 
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[0039] The varianto embodiments shown in Figs 1 to 7 for networking the 

brake units 9 to 12 with the control devices 13, 18 may - where appropriate - be 
combined in any desired way, in particular the networking at the level of the 
axles 2, 3 according to Figs^ 6 and 7 may also be combined with the networking 
at the level of the control devices 13, 18 according to Figs^ 1 to 5. 

[0040] The first control device 13 and, where present, also the second 

control device 18 preferably comprises wheel-specific components of a steer-by- 
wire system and may additionally be dooignod constructed such that it actuates 
the individual brake units 9 to 12 during a braking operation as a function of a 
braking algorithm , which that is dooignod such that it allows constructed to 
allow intervention in the steering of the vehicle if certain parameters are 
present. Such intervention in steering is intended^, for example^ in the case of a 
dynamic vehicle stabilization system, which is known in specialist circles as ESP 
IIL In this configuration, parts of such a stabilization system are thus already 
linked within the control device 13, 18 to suitable components of the steer-by- 
wire system , which improvoo to improve the performance of the stabilization 
system and rcducoo reduce the svstem price of ouch a oyotom . 

[0041] Another particularly advantageous configuration is one in which 

the first control device 13^ and in particular also the second control device 18^ 
executes a coordination algorithm during a braking operation . This operation 
distributes , in ordor to distribute a braking force necessary for braking the 
vehicle as a function of this coordination algorithm to the service brake 8 and, 
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where present, to an engine brake of the vehicle 1 and, where present, to a 
retarder of the vehicle 1. Provision may also be made to enhance the engine 
brake by actuating an actuatable transmission in the change-down direction. 
Optimum distribution of the braking force to the various braking systems of the 
vehicle 1 reduces the wear and energy consumption of the vehicle 1. For 
example, minor braking operations may be performed solely with the retarder or 
solely with the engine brake, which both operate in wear-free manner compared 
with the service brake 8. 

[0042] The first control device 13^ and preferably also the second control 

device 18^ operates in normal operation normally with a main braking algorithmj 
which onouroG to ensure, during a braking process^ that the braking force to be 
achieved by moans of the service brake 8 is distributed to the individual brake 
units 9 to 12 as a function of this main braking algorithm. In addition to the 
main braking algorithm, the first control device 13^ and in particular also the 
second control device 18^ may be equipped with at least one emergency braking 
algorithm , which that replaces the main braking algorithm in emergency 
operation. 

[0043] Different emergency braking algorithms may be provided for 

different instances of emergency operation. Such emergency operation is 
characterized by the failure of at least one brake unit 9 to 12. A suitable 
emergency braking algorithm may then be determined or selected for the 
particular instance of emergency operation, which then actuates the remaining 
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functional brake units 9 to 12 to brake the vehicle 1 as a function of the 
respective emergency braking algorithm . This , wherein thio emergency braking 
algorithm takes account of the respectively failed brake unit 9 to 12 when 
distributing the braking force to the remaining functional brake units 9 to 12. 

[0044] In thio way As described above, it is now possible, within certain 

limits, to achieve comparatively safe braking of the vehicle 1 even in the event of 
failure of one or more brake units 9 to 12. An essential feature in implementing 
such a safety concept is the provision of a four-circuit system in the case of four 
brake units 9 to 12 . This has been , thio boing achieved in the preset invention by 
tho possibility of separate actuation of the individual brake units 9 to 12. 
[0045] The foregoing disclosure has been set forth merelv to illustrate the 

invention and is not intended to be limiting. Since modifications of the disclosed 
embodiments incorporating the spirit and substance of the invention mav occur 
to persons skilled in the art, the invention should be construed to include 
evervthin^ within the scope of the appended claims and equivalents thereof. 



-19- 



